Flowise

Interact with Flowise AI workflows via REST API. Use when user mentions Flowise, chatflows, or wants to send messages to Flowise bots/agents. Supports listing flows, sending predictions, and managing conversations.

This skill appears to do what it says (talk to a Flowise server), but the runtime instructions expect the agent to read a local TOOLS.md file, use environment variables (FLOWISE_URL, API_KEY), run shell curl commands, and may upload local files. Before installing or enabling this skill: 1) Confirm where the Flowise server URL and API key will be stored — avoid putting secrets in a shared TOOLS.md visible to other skills/agents. 2) Prefer using the bundled Python client (which performs HTTP calls directly) over shell exec to reduce shell-injection risk. 3) Understand that file-upload examples will read and transmit local files to the Flowise server — only allow this if you trust the server. 4) Because the SKILL.md references env vars and config files but the metadata doesn't declare them, ask the author to explicitly document required env vars/config paths or update the skill metadata. These inconsistencies are likely a sloppy omission, but they meaningfully increase the risk of accidental data exposure, so proceed with caution.

Type: OpenClaw Skill Name: openclaw-flowise-skill Version: 0.1.0 The `SKILL.md` file instructs the AI agent to interact with a Flowise API, explicitly detailing a `form` object with a `script` parameter described as '要执行的脚本' (script to be executed). The agent is instructed to pass user-controlled input to this `script` parameter. Given the suggested default Flowise server URL of `http://localhost:3000`, a malicious prompt could instruct the agent to send a harmful script to the local Flowise instance, potentially leading to arbitrary code execution on the agent's host. This constitutes a significant prompt injection vulnerability against the agent, leveraging a potential RCE in the Flowise API, rather than direct malicious code within the skill bundle itself.